Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VMYOMQgw54VxKBKMMlv_ptorT58.roa
File: VMYOMQgw54VxKBKMMlv_ptorT58.roa (raw, json)
Hash identifier: y/0e7gT9Iei/j8vwgLeme0VJ2ZIVMby9NluFGEzvepw=
Subject key identifier: 54:C6:0E:31:08:30:E7:85:71:28:12:8C:32:5B:FF:A6:DA:2B:4F:9F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F670CA58B59FD20D087B482DDCD751F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VMYOMQgw54VxKBKMMlv_ptorT58.roa
Signing time: Sun 01 Jan 2023 22:15:02 +0000
ROA not before: Sun 01 Jan 2023 22:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 194.87.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Mar 2023 11:53:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:0c:a5:8b:59:fd:20:d0:87:b4:82:dd:cd:75:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54c60e310830e7857128128c325bffa6da2b4f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:05:b3:42:16:b0:c3:67:06:dc:1a:1a:9e:
8a:a4:0f:b3:4e:99:41:e7:1e:f4:85:46:a6:83:46:
2c:ac:90:0c:06:ea:e1:2d:a2:d7:d4:9b:e4:8d:bd:
0d:ab:93:90:df:a6:46:03:02:39:b6:78:22:99:42:
d6:de:b9:c3:95:ab:fd:05:b3:6f:e0:02:61:d4:13:
f6:83:5c:8d:58:32:60:63:f1:04:d9:25:52:4c:83:
7e:ca:4a:e0:be:d1:e4:85:0e:45:17:87:0a:42:2d:
82:0a:32:7d:0a:1a:c1:8b:07:e1:72:75:d3:bf:3e:
84:d8:3a:e4:e2:5a:f2:19:9e:e1:04:5a:85:2e:30:
9c:53:4f:fa:5a:3b:54:e3:1f:21:76:22:af:f7:27:
4f:b3:2d:1f:75:27:09:05:26:84:1c:b3:34:33:cc:
fe:7d:f3:19:5b:ff:3d:1a:47:08:bb:31:4a:c4:b0:
d4:56:7a:68:53:b0:bd:20:e2:44:b6:32:4b:0a:8d:
c2:fe:2a:47:d0:9f:c1:a5:cd:9a:b6:ef:19:96:57:
54:bc:27:a7:f9:eb:f3:ff:6a:f8:02:03:23:4d:f1:
3c:0c:2d:c6:82:b1:d7:84:d6:5a:df:5a:38:bc:0c:
b9:55:6e:62:32:2f:73:a6:5f:3a:b1:16:32:4f:0b:
83:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C6:0E:31:08:30:E7:85:71:28:12:8C:32:5B:FF:A6:DA:2B:4F:9F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VMYOMQgw54VxKBKMMlv_ptorT58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.121.0/24
Signature Algorithm: sha256WithRSAEncryption
35:0e:0c:29:04:9e:14:07:35:4c:f2:58:0e:87:75:71:27:96:
90:9f:6b:31:37:cc:4c:8b:d1:2b:cc:19:49:b4:8b:5f:81:0b:
f4:6a:5c:8c:a0:d9:a9:74:37:cd:5d:1b:a9:1a:f4:49:51:9c:
b5:64:59:b9:58:fc:3b:1b:48:69:26:8f:48:0a:16:81:a8:e2:
12:17:5d:2a:63:6f:16:df:86:5e:c7:69:6b:e4:fd:5e:e5:e8:
e9:82:19:3b:0f:42:78:a7:61:1e:46:fa:47:35:1a:c4:df:8d:
a0:ab:33:b3:3b:c7:d9:2a:2b:47:e9:18:c0:94:42:23:82:fe:
37:60:67:0e:c3:84:a9:45:ed:0d:4e:00:a6:9b:a3:dd:94:2d:
7b:7e:35:5a:f4:f5:94:3b:b1:d0:36:a3:35:71:6c:f0:be:42:
dc:26:a4:6a:a4:c2:69:19:d9:9f:3a:09:b6:ca:89:a3:16:7e:
9d:5f:7d:3a:54:c3:84:6f:1b:e8:ce:1d:b5:92:ab:ff:55:a4:
0b:69:fb:fd:38:28:91:cf:d4:fb:1c:7d:a5:fd:a7:2c:33:1b:
00:ce:34:dd:f6:1e:83:71:16:e1:c8:a0:8d:08:c1:72:55:8f:
41:24:37:e9:68:67:a9:6c:98:36:db:cb:ae:1e:90:65:da:ab:
b0:fa:13:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:18 2024 by rpki-client on console-fra.rpki-client.org